Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: Oo8RV3gOfUHu2tcl9eWM9OlRL/s3YRUci7X0v78dg8c=
Subject key identifier: E4:D3:18:27:06:18:73:1C:C8:BB:B4:AC:CF:5E:15:43:6C:35:99:F3
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01964CA29D76A8F0DA1BDEE4222DD878E7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 3F
Signing time: Sat 19 Apr 2025 06:00:47 +0000
Manifest this update: Sat 19 Apr 2025 06:00:47 +0000
Manifest next update: Sun 20 Apr 2025 06:00:47 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: 8cWB8D4XLazVMk6IpxlkV4FlQNjEVtrqa+gm/522BeI=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:9d:76:a8:f0:da:1b:de:e4:22:2d:d8:78:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Apr 19 06:00:47 2025 GMT
Not After : Apr 20 06:00:47 2025 GMT
Subject: CN=e4d318270618731cc8bbb4accf5e15436c3599f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d4:5b:31:88:20:d3:33:88:45:92:4f:12:ed:
17:bb:c3:57:cb:4b:47:6a:6f:39:12:03:85:99:69:
7f:c1:dc:34:4d:27:16:18:4b:10:2a:6c:71:e2:36:
9e:c3:8a:5a:38:4e:5c:ef:15:f3:a2:60:74:b2:5d:
09:a4:fa:66:f7:38:37:f0:55:f6:a6:ea:f0:47:60:
41:79:d1:55:88:2b:29:cc:ec:86:11:86:cc:66:3a:
b0:2c:fc:88:7f:2d:94:87:82:87:cc:9c:aa:b3:e4:
fe:a1:d4:7e:7f:42:65:54:8d:27:11:5b:75:68:52:
b3:fa:6e:d3:6b:41:fa:0b:4c:51:56:05:bb:ba:6b:
fb:0a:d3:31:2f:ef:e1:f9:1f:8c:ed:34:ce:bf:1c:
03:dd:9e:82:08:3c:64:57:36:c8:7f:e4:32:16:6d:
b6:a8:98:50:cb:61:07:e8:35:a4:3e:30:d6:2b:e4:
48:2d:37:e1:36:2e:29:77:1b:c0:20:89:87:61:8f:
e2:96:a0:c9:45:a4:20:f5:92:95:4b:36:80:5d:a5:
8c:9d:a7:4a:fd:47:41:e5:59:3e:35:4e:fe:b9:7f:
30:f0:04:ab:10:fa:6e:9c:51:c9:d5:6f:ad:39:6d:
77:87:9e:f2:06:e0:e6:49:5a:ee:2c:3d:de:9b:bc:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:18:27:06:18:73:1C:C8:BB:B4:AC:CF:5E:15:43:6C:35:99:F3
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:21:5e:aa:1e:34:6a:b5:34:76:2f:f7:d7:dd:18:45:28:6b:
fb:b0:35:b4:2b:57:a1:c1:f5:43:81:e4:62:c8:cc:cf:5f:03:
73:0f:05:00:35:41:af:f4:6f:83:f0:f3:36:a4:1d:4c:eb:ed:
a3:fc:15:1f:c6:8e:59:ef:57:6a:2e:13:14:d9:f2:af:b8:46:
58:a3:ed:a0:d2:a8:35:37:87:6e:6c:a3:8d:dd:8c:6f:82:38:
35:f1:60:8f:7a:f2:90:96:61:ca:af:a1:a9:b6:42:91:c5:20:
b6:70:48:6b:9c:1a:e1:e8:fc:b8:01:e8:82:39:8d:61:09:a0:
f0:e0:ed:e6:87:4e:59:e8:b8:28:ca:a8:9f:5c:a4:f2:0e:c4:
68:11:c3:74:d6:ca:15:8c:95:2a:e0:be:c2:5a:df:9f:49:fd:
82:7a:a0:a9:15:4c:a2:da:88:fe:7a:63:d1:62:37:38:70:70:
7f:78:3d:72:e0:05:ed:76:7e:72:ae:6b:d4:14:24:16:27:48:
8b:c6:5c:bc:39:5d:17:54:6d:bd:99:a6:f9:eb:2c:be:a2:9a:
23:16:da:3c:2b:e0:92:10:25:8a:b3:57:2b:c9:d6:c7:e2:77:
d8:8d:4d:17:15:95:e6:c7:54:95:26:95:14:f0:31:15:b9:14:
2c:02:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:07 2025 by rpki-client